Skip to main content
Admins can connect a SAML identity provider so members sign in with their IdP credentials, and can then require SSO for every sign-in.

Set up SSO

1

Create a SAML application in your IdP

In your IdP’s admin console, create a SAML 2.0 application and enter these values:
Don’t add a trailing slash to either value.
If your IdP supports it, assign the application only to the groups or users who should have access.
2

Copy your IdP's SAML details

Your IdP lists them under a name like SAML setup instructions or Metadata:
3

Save them in Allium

Open Settings > Team > SSO & Access, paste the three values and choose Save. Saved details are masked.
Single sign-on settings with SSO URL, entity ID and certificate fields

Require SSO

Turn on Restrict logins to SSO to block every sign-in method except SSO. It applies as soon as you switch it, and needs a saved SSO configuration. Deleting the configuration turns it back off.
Some plans don’t include SSO. Contact [email protected] to upgrade.